github Azure/ResourceModules v0.6.0

latest releases: module-archive, v0.11.1, v0.11.0...
22 months ago

Highlights

📯 Cross-Module reference alignment: To increase consistency and avoid code duplication, all modules previously leveraging nested templates for resources of a different resource type are now referencing the same CARML module
📯 Added Bicep + JSON deployment examples to all module readme files
📯 Added CARML logical layers and personas Wiki page

Modules

  • New modules:
    • App Configuration Stores with Key Values
    • Compute NetworkInterfaces
    • DataProtection Backupvaults
    • OperationsManagement Solutions
    • Authorization Locks
  • Improved modules:
    • Cognitive Services: Set secure defaults
    • EventGrid: Set secure defaults
    • Storage Accounts: Implemented Customer-Managed Keys
    • SQL Server: Added private endpoint and vulnerability assessments
    • Private DNS records: Added Role assignments
    • VirtualMachine: Configure boot diagnostics with managed storage account
    • Eventhub: Added Network Rules
    • VMSS: Added Condition to EncryptionAtHost
    • OperationalInsights: Added etag parameter to SavedSearches
    • Azure Firewall: Added Public IP
    • Bastion Hosts: Added Public IP
    • ACR: Added webhooks and updated ACR CMK implementation
    • BatchAccounts: Added configuration options
    • AKS: Added Application Gateway Ingress Controler (AGIC) addon
    • Updated API version for Role assignments, ML Workspace, Eventhub, Recovery Services Vault, Compute Galleries
  • Improved parameter metadata descriptions & module readmes:
    • Updated parent-child resource conditional description
    • Improved parameter description formatting
    • Update conditional parameters descriptions to include the condition under which they are required
    • Merged Azure Resource Reference documentation links with the list of deployed resource types
  • Changed telemetry implementation to only deploy a single PID: Disabled telemetry on child resources and on cross-referenced resources
  • Added location output to all templates supporting it
  • Added multiple VM deployment example

CI Environment

  • Improved robustness and duration of environment setup task on agents
  • Improved resource removal logic:
    • Implemented purge for AppConfiguration
    • Added role assignment removal
    • Added registrationDefinitions removal
    • Improved lock removal
    • Cleanup custom removal logic for VWan
  • Improved GitHub workflows:
    • Updated GitHub Workflows to use Azure/PowerShell action
  • Improved ADO pipelines:
    • Fixed ADO publishing to Bicep registry
    • Fixed ADO triggerpath
    • Updated conditions for ADO dependency pipeline
  • Created Issue-Assignment pipeline to automate assignment of new issues to the intended project

Static Validation

  • New Pester tests:
    • All parameter descriptions should end with a period
    • Conditional parameters description should contain the condition under which they are required
  • Added exception handling for resources not having standard outputs
  • Reworked tests to not use HTML & shared functions
  • Expanded Pester test output

Wiki

  • Overarching review and lingo update
  • Improved solution examples
  • Extended Contribution flow section
  • Updated required GitHub settings to successfully run static validation
  • Added Management Group module notes to known issues

Utilities

  • Enabled generation script to add Bicep + JSON deployment examples to module readmes
  • Added Get-FormattedGitHubRelease function to support release highlights (these highlights :) )
  • Improved Set-ModuleReadMe utility when called w/ relative path

Fixes

  • Workaround for Az CLI bug introduced by latest CLI version (2.37.0) used by the ubuntu-20.04 agents
  • Replace space with %20 in the ADO projectname
  • Fixed pipeline name parsing in Register-AzureDevOpsPipeline utility
  • Update casing for IPsec connections
  • Added missing output to Tags module
  • Fixed all parameter descriptions to comply with updated static validation
  • Fixed KeyVault reference for Bicep example in ReadMes
  • Updated references to the global variables file
  • Fixed typo in global test
  • Swapped the values for tenantId and deploymentSpId
  • Corrected AVD Host pool parameter for dependency pipeline
  • Added principalType to RSV param
  • Fixed ApplicationGateway pipeline deployment by updating the keyvault reference

All merged PRs

  • [CI Environment] Change Task Type for ADO in the publishing to bicep registry by @SeSeicht in #1340
  • [Fixes] Fixed broken SQL-MI link by @fblix in #1350
  • [Modules] Switched from resource name to resource ID in RBAC deployment by @MrMCake in #1352
  • [Modules] Merged resource references with types table + renewed readmes by @MrMCake in #1354
  • [Modules] Added configuration options to Microsoft.Batch/batchAccounts by @fblix in #1348
  • [Modules] Add RBAC to Private DNS records by @simonbMS in #1344
  • [Modules] Added Application Gateway Ingress Controler (AGIC) addon to AKS by @JPEasier in #1345
  • [CI Environment] Added role assignment removal to removal logic by @MrMCake in #1343
  • [Modules] Downgrade RBAC API version by @eriqua in #1358
  • [Modules] Update ML Workspace to latest API by @MrMCake in #1359
  • [Modules] Allowed User assigned identity deployments by @ahmadabdalla in #1361
  • [Fixes] Set-ModuleReadMe when called w/ relative path by @MrRoundRobin in #1366
  • [Modules] Update parent-child resource conditional description & updated format by @MrMCake in #1355
  • [Modules] Update Conditional descriptions by @eriqua in #1376
  • [Modules] Added multiple vm deployment example by @MrMCake in #1369
  • [Modules] Fixing typos across Rbac descriptions by @eriqua in #1377
  • [Modules] Added SQL Server Vulnerability Assessments by @MrRoundRobin in #1374
  • [Fixes] Fixed some missing parts to pipelines and a mistake in wiki by @MariusStorhaug in #1381
  • [Modules] VirtualMachine: Configure boot diagnostics with managed storage account by @lsnoddy in #1365
  • [Modules] Added location output to templates by @MrMCake in #1371
  • [Static Validation] Pester structural tests by @MrMCake in #1373
  • [Modules] EventGrid: Set default values to a secure value by @lsnoddy in #1384
  • [Modules] SQL-Server: Added private endpoint by @MrMCake in #1367
  • [Wiki] picture fix: changing to by @segraef in #1391
  • [CI Environment] Fixed location output test for global resources by @MrRoundRobin in #1390
  • [Modules] allow 0 as min capacity by @rahalan in #1398
  • [CI Environment] Set Az Context in Removal Stage in ADO by @SeSeicht in #1389
  • [Modules] Update Eventhub Network Rules + latest APIs by @ahmadabdalla in #1387
  • [Fixes] Update casing for IPsec connections by @luisarnauth in #1407
  • [Static Validation] Ending parameter description with a dot by @eriqua in #1394
  • [Fixes] Added missing output to tags module by @MrMCake in #1408
  • [Modules] Fixed Inconsistent naming of NSGs IDs #1323 by @prasanjeets in #1406
  • [Modules] Added telemetry to AAD module & description to docs by @MrMCake in #1393
  • [Modules] VMSS add Condition to EncryptionAtHost by @SeSeicht in #1414
  • [Modules] Update Recovery Services Vault API to latest by @SeSeicht in #1411
  • [Modules] New App Configuration Stores module by @ArielRam99 in #1404
  • [Modules] Added NetworkInterface module by @MrMCake in #1400
  • [Fixes] Fixing ending dots for parameter descriptions by @eriqua in #1419
  • [Modules] update parameter paths of Deployment Scripts by @SeSeicht in #1412
  • [Fixes] Fixing ending dots for parameter descriptions continued by @eriqua in #1420
  • [Modules] OperationalInsights add etag parameter to SavedSearches by @SeSeicht in #1413
  • [Modules] Added private endpoint to application config by @MrMCake in #1418
  • [Utilities]: Enabled generation script to add Bicep + JSON deployment examples to readme V2 by @MrMCake in #1362
  • [Fixes] Fixing ending dots for parameter descriptions continued by @eriqua in #1424
  • [Modules] Renamed parameter to more meaningful name by @MrMCake in #1423
  • [CI Environment] Implemented purge for AppConfiguration by @MrMCake in #1426
  • [CI Environment] Updated conditions for ADO dependency pipeline by @MrMCake in #1422
  • [Static Validation] Add Pester test for conditional parameters description by @eriqua in #1427
  • [Modules] Changed telemetry implementation to only deploy a single PID by @MrMCake in #1437
  • [Modules] 1154 Add Public IP to Azure Firewall by @jontreynes in #1392
  • [Fixes] Event Hub missing description dot by @eriqua in #1438
  • [Modules] VM automanage update by @eriqua in #1444
  • [Fixes] Fixed KeyVault reference for Bicep example in ReadMes by @MrMCake in #1439
  • [Modules] Cleared out a mountain of compiler warnings by @MrMCake in #1447
  • [Modules] Cross-Module references by @MrMCake in #1401
  • [Wiki] Updated solution examples in Wiki by @MrMCake in #1375
  • [CI Environment] Updated removal script to restore tokens by @MrMCake in #1449
  • [CI Environment] Created Issue-Assignment pipeline by @MrMCake in #1456
  • [Fixes] Updated references to the moved global variables file by @akata72 in #1467
  • [Fixes] Fix typo in global test by @MariusStorhaug in #1464
  • [Fixes] Swapped the values for tenantId and deploymentSpId by @akata72 in #1469
  • [Fixes] Updated parameters description to fix failed Pester tests by @akata72 in #1480
  • [CI Environment] Workaround for Az CLI bug + regenerated docs with fix #1471 by @MrMCake in #1476
  • [Modules] Fix pipeline errors by @MrMCake in #1448
  • [Modules] webhooks for ACR by @tjav in #1397
  • [Modules] Implemented CMK for Storage Account by @MrMCake in #1431
  • [CI Environment] Cleanup outdated custom removal logic for VWan by @eriqua in #1491
  • [Modules] Formatted Automation Account parameter files by @MrMCake in #1485
  • [Utilities] Replace space with %20 in the ADO projectname. by @akata72 in #1478
  • [CI Environment] Update GitHub Workflows to use Azure/PowerShell action by @MariusStorhaug in #1451
  • [CI Environment] Added removal for registrationDefinitions by @MrMCake in #1479
  • [Modules] Cross referencing linkedServices module in automationAccount by @eriqua in #1494
  • [Static Validation] Reworked tests to not use HTML & shared functions by @MrMCake in #1462
  • [Modules] Adjusted locks, added tests & enabled removal by @MrMCake in #1446
  • [Modules] Update PolicySet Definition Name limit to 64 by @SeSeicht in #1470
  • [Fixes] Corrected AVD Host pool parameter for dependency pipeline by @MariusStorhaug in #1500
  • [Static Validation] Updated tests to better handle resources that don't have standard outputs + updated 'skip' behavior + fixed Pester test result reference + fixed readme param name by @MrMCake in #1482
  • [Fixes] Added principalType to RSV param by @MariusStorhaug in #1507
  • [Modules] Added Public IP to Bastion Hosts module by @jontreynes in #1506
  • [Fixes] Fixed ApplicationGateway pipeline deployment by updating the keyvault reference. by @akata72 in #1497
  • [CI Environment] Improve runtime of Set-EnvironmentOnAgent script by @MrMCake in #1481
  • [CI Environment] Switching Pester task back to AzPowerShell + Simplifying pipeline by @MrMCake in #1505
  • [Static Validation] Fixed incorrect API test reference & env-value propagation by @MrMCake in #1508
  • [Modules] Disable telemetry on cross referenced resources by @eriqua in #1510
  • [Fixes] Fixed pipeline name parsing in Register-AzureDevOpsPipeline.ps1 by @julioas09 in #1509
  • [Static Validation] Expanded Pester test output by @MrMCake in #1486
  • [Fixes] removed comma by @chwunder in #1517
  • [Modules] DataProtection Backupvaults added by @akata72 in #1496
  • [CI Environment] Extend agent setup to be more robust by @MrMCake in #1522
  • [CI Environment] Fixed lock removal + added error handling in case no deployment resource if found by @MrMCake in #1515
  • [CI Environment] Updated the triggerpath from ..pipelineTemplates/module.* to pipelineTemplates/jobs.* by @akata72 in #1502
  • [Modules] Renamed nested_rbac.bicep to nested_roleAssignments.bicep by @elbatane in #1501
  • [Modules] Create solutions module and cross reference in workspace and automation account by @eriqua in #1511
  • [Wiki] Update wiki with required GH settings for CI environment run by @chwunder in #1528
  • [Modules] Fix Data Protection Backup Vault module by @eriqua in #1534
  • [Modules] Fix Automation Account and Log Analytics Workspace by @eriqua in #1530
  • [Modules] Compute Galleries API version update by @eriqua in #1529
  • [Modules] Remove RBAC capabilities from ManagementGroup module by @MrMCake in #1542
  • [Wiki] Management Group module known issues by @eriqua in #1544
  • [Modules] Storage Account minor update to param example in networkAcls. by @akata72 in #1540
  • [Modules] Azure Firewall cross referencing PIP by @eriqua in #1549
  • [Modules] Disk Encryption Sets cross referencing KV access policies by @eriqua in #1548
  • [Modules] Container registry updated default value by @prasanjeets in #1537
  • [Modules] Key Values child resource for App configuration store by @ArielRam99 in #1536
  • [Modules] Revert encryption default value and update container registry readme by @eriqua in #1552
  • [Modules] Lock module and cross reference from RG by @eriqua in #1547
  • [Modules] Fix locks output scope by @eriqua in #1559
  • [Wiki] Overarching review and lingo update by @matebarabas in #1463
  • [Fixes] Added missing closing bracket to Bicep deployment example, removed unsued VM module parameter & regenerated documentation by @MrMCake in #1556
  • [CI Environment] Simplified env-setup script by @MrMCake in #1525
  • [Modules] Updated ACR CMK implementation & adjusted deployment tests by @MrMCake in #1558
  • [Wiki] Update wiki dependencies with latest added resources by @eriqua in #1561
  • [Modules] Fix VM pipeline and align module symbolic links by @eriqua in #1562
  • [Modules] AppConfiguration: Excluded not available features from free tier by @itpropro in #1567
  • [Wiki] CARML personas by @matebarabas in #1560
  • [Modules] Congnitive Services: Set secure defaults by @MrMCake in #1483
  • [Utilities] Added Format-Release function by @MrMCake in #1569
  • [Wiki] Sidebar and contribution flow update by @eriqua in #1573
  • [Wiki] Contribution flow remove duplicate by @eriqua in #1574

New Contributors

Full Changelog: v0.5.0...v0.6.0

Don't miss a new ResourceModules release

NewReleases is sending notifications on new releases.